dnsmasq: abort when dnssec requested but not available

[openwrt/staging/mkresin.git] / package / network / services / dnsmasq / files / dnsmasq.init

diff --git a/package/network/services/dnsmasq/files/dnsmasq.init b/package/network/services/dnsmasq/files/dnsmasq.init
index 9288971426ae6146509e046e34391f1082b807ad..932103d8b5b52c069fdd3ad737900708ae7e9d80 100644 (file)
--- a/package/network/services/dnsmasq/files/dnsmasq.init
+++ b/package/network/services/dnsmasq/files/dnsmasq.init
@@ -42,9 +42,13 @@ dnsmasq_ignore_opt() {
                bootp-*|\
                pxe-*)
                        [ -z "$dnsmasq_has_dhcp" ] ;;
-               dnssec-*|\
+               dnssec*|\
                trust-anchor)
-                       [ -z "$dnsmasq_has_dnssec" ] ;;
+                       if [ -z "$dnsmasq_has_dnssec" ]; then
+                               echo "dnsmasq: \"$opt\" requested, but dnssec support is not available" >&2
+                               exit 1
+                       fi
+                       ;;
                tftp-*)
                        [ -z "$dnsmasq_has_tftp" ] ;;
                ipset)